Config-Disclosure — PoC Archivehttps://poc.intelseclab.com/tags/config-disclosure/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Nezha Dashboard Path Traversal → JWT Secret Leak → Token Forgery — CVE-2026-53519https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53519-nezha-path-traversal-jwt-forgery/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-53519-nezha-path-traversal-jwt-forgery/Info severity — web · CVE-2026-53519 (GHSA-5c25-7vpj-9mqh). Status: PoC. Affects: Nezha Dashboard (monitoring/agent management panel). Tags: nezha, path-traversal, jwt-forgery, unauthenticated, config-disclosure, sqlite, privilege-escalation, cwe-22, cwe-347.webInfonezhapath-traversaljwt-forgeryunauthenticatedconfig-disclosuresqliteprivilege-escalationcwe-22cwe-347HPE Aruba AOS-CX Pre-Auth REST API Bypass via nginx Version Smuggling (CVE-2026-23813)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-23813-aruba-aoscx-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-23813-aruba-aoscx-auth-bypass/Critical severity (CVSS 9.8) — network · CVE-2026-23813. Status: PoC. Affects: HPE Aruba Networking AOS-CX. Tags: aruba, aos-cx, authentication-bypass, nginx, ovsdb, network-switch, config-disclosure, cwe-287.networkCriticalarubaaos-cxauthentication-bypassnginxovsdbnetwork-switchconfig-disclosurecwe-287